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dn: cn=managerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsSimpleRole 
objectclass: nsManagedRole 
cn: managgerrole 

description: Manager Role within the Company 



dn: uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 
objectclass: person 
objectclass: inetorgperson 
uid: pointyhair 
gn: pointy 
sn: hair 

nsRoleDN: cn=managerrole, dc=dom, dc=ain 
description: Pointy Haired IVIanager 



dn: cn= building12people, dc=dom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsFilteredRole 

cn: building12people 

nsRoleFilter: building=12 

description: People who work in building 12 
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dn: cn=megamanagerrole, dc=clom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsNestedRole 

cn: megamanaggerrole 

nsRoleDN: cn=managerrole, dc=dom, dc=ain 

nsRoleDN: cn=networkmanager, dc=dom, dc=ain 

description: Super iVIanager Role within the 
Company 



dn: cn=peonrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsEnumeratedRoie 
objectclass: groupofuniquenames 
cn: peonrole 

groupmember: uid=dboreham, ou=people, dc=dom, dc=ain 
groupmember: uid=merrells, ou=people, dc=dom, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 



For each entry within scope, the 
computed attribute nsRole is calculated 



The computed attribute nsRole is 
examined to see if the role is present. 



This results in a list of entries that 
possess the role. 



The list is thereafter returned to a 
client. 
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Dn:cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosClassicDefinitlon 
cosTemplate 

Dn: cn=MaiiServerCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifler: mailServiceClass 
cosAttribute: mailboxquota 
cosAttribute: maysendexternalmail 





dn: cn=user, cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxqudta: 10000000 

maysendexternalmail: TRUE 

dn: cn=guest. cn=MailServerCOS, cn=LocalConflg, o=NetscapeRoot 
objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendexternalmail: FALSE 



dn: cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosPointerDefinition 
cosTemplateDn: ou=people, o=acme 
cosAttribute: facsimilieTelephoneN umber default 



dn: cn=messaging_server_cos, ou=people, 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: coslndirectDefinition 
coslndlrectSpecifier: manager 
cosAttribute: accountingCode 



